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SUMMARY 

Aerospace components are often subjected to complex service environments 
such as random excitations and random temperature conditions. In addition, 
small variations in the material properties or geometry may significantly 
affect the structural performance and durability of aerospace components. 
Therefore, a methodology was developed to determine structural reliability and 
to assess the associated risk due to various uncertainties in the design varia- 
bles. The methodology consists of a probabilistic structural analysis by a 
special computer code NESSUS (Numerical Evaluation of Stochastic Structures 
Under Stress), a generic probabilistic material property model (multifactor, 
interaction equation), and a probabilistic fatigue analysis. The methodology 
is versatile and is equally applicable to structures operating at high- 
temperature and/or cryogenic environments. The relationship between the proba- 
bility of crack initiation and fatigue cycles is developed. The probabilistic 
crack propagation at a given risk level is studied. The most probable fracture 
path at a given cycle is determined. Those results serve as a guideline for 
component certification and for setting inspection criteria. The methodology 
is demonstrated to be capable of formally evaluating structural reliability and 
risk - including uncertainties in material properties, structural parameters, 
and loading conditions. It is described in detail with an application to the 
space shuttle main engine (SSME) blade. 


INTRODUCTION 

Probabilistic structural analysis methods (PSAM) (ref. 1) have been devel- 
oped to analyze the effects of fluctuating loads, variable material properties, 
uncertainties in analytical models and geometry, and other factors - especially 
for high-performance structures such as the space shuttle main engine (SSME) 
turbopump blades. In the deterministic approach, the uncertainties in the 
responses are not quantified, and the actual safety margin remains unknown. 

Risk is calculated after extensive service experience. However, probabilistic 
structural analysis provides a rational alternative method to quantify uncer- 
tainties in structural performance and durability. NESSUS (Numerical Evaluation 
of Stochastic Structures Under Stress) is a probabilistic structural analysis 
computer code developed under the PSAM program, which integrates finite element 
methods and reliability algorithms (refs. 2 and 3). This code can predict the 



scatter of structural response variables such as stress, displacement, natural 
frequencies, and buckling loads, due to structural and environmental uncertain- 
ties. These predictions are subsequently compared with their probable failure 
modes to assess the risk of component fracture. Probable failure modes are 
defined for different structures and their respective service environments. 

For example, failure events such as stress greater than strength, displacements 
exceeding the maximum displacements allowed or avoidance of resonance are often 
used for the reliability assessment. Probability of occurrence of those fail- 
ure events can be determined once the probability distributions of the requi- 
site structural response variables are calculated with NESSUS. 

In a reliability and risk analysis, all suspected sources of uncertainties 
must be taken into account to keep the probability of failure in service envi- 
ronments within an acceptable range. Structural reliability and risk obtained 
by a formal probabilistic methodology can be useful in evaluating the tradi- 
tional design and in setting quality control requirements, inspection criteria, 
and criteria for retirement for cause. This analysis can also identify candi- 
date materials and design concepts in the absence of a technology base. This 
paper extends the previous work (ref. 4), which studied only the probabilistic 
crack initiation. Current work also includes probabilistic crack propagation 
and probabilistic fracture paths analysis. 


CONCEPT OF PROBABILISTIC STRUCTURAL ANALYSIS 

In a probabilistic structural analysis, the primitive (random) variables 
that affect the structural behavior have to be identified. These variables, 
which include temperature, material properties, structural geometry, and load- 
ing conditions, should be described by their respective probability distri- 
butions. A structural analysis performed by NESSUS with the predetermined 
probability distributions of all the primitive (random) variables will produce 
corresponding scatter (uncertainties) in the structural responses such as dis- 
placement, stress, and natural frequencies. This concept is illustrated by 
figure 1. 


STRUCTURE OF NESSUS 

NESSUS consists of three major modules: NESSUS/PRE, NESSUS/FEM, and 

NESSUS/FPI . NESSUS/PRE, a pre-processor, prepares the statistical data needed 
for the probabilistic structural analysis. It allows the user to describe the 
uncertainties in the structural parameters (primitive random variables) at 
nodal points of a finite element mesh. The uncertainties in these parameters 
are specified over this mesh by defining the mean value and standard deviation 
of the random variable at each point, together with an appropriate form of cor- 
relation. Correlated random variables are then decomposed into a set of uncor- 
related vectors by a modal analysis. In a strongly correlated random field, 
there are significantly fewer dominant random variables in the set of uncorre- 
lated vectors than in a weakly correlated random field. Thus, the computa- 
tional time required for the analysis is reduced significantly. 

NESSUS/FEM, a finite element code used for the structural analysis, gener- 
ates a database containing all the response information corresponding to a 
small variation of each independent random variable. The algorithm used in 
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NESSUS/FPI requires an explicit response function in order to perform a reli- 
ability analysis. In complicated structural analysis problems, response can 
only be available implicitly through a finite element model. To overcome 
this difficulty, the response function is expressed parametrically with this 

database . 

NESSUS/FPI (Fast Probability Integrator), an advanced reliability module 
(ref. 3), extracts the database generated by NESSUS/FEM to develop a response 
or a performance model in terms of uncorrelated random variables. The probabi- 
listic structural response is calculated from the performance model. The prob- 
ability of exceeding a given response value is estimated by a reliability 
method, which treats the problem as a constrained minimization. This step is 
called a point probability estimation. The cumulative distribution function is 
generated by running FPI at several response values. One alternative for gen- 
erating the distribution function for any given response is to conduct a direct 
Monte Carlo simulation study. However, in general, it is very costly. NESSUS/ 
FPI not only produces an accurate probability distribution, but also requires 
less computing time than a Monte Carlo simulation, especially in low- 
probability regions. 


PROBABILISTIC MATERIAL PROPERTIES MODEL 

A generic material-behavior model (multifactor interaction equations) 
(ref. 5) is used to evaluate the scatter in material properties for structures 
subjected to high temperatures and high cyclic loading. The fundamental 
assumption for this model is that the material behavior can be simulated by 
primitive (random) variables. The general form of this model is shown in 
equation (1): 


Mp . m/yiiVY - ;°*"m y (1) 

P PO\Tp T q J \^S f o 0 J l^log N mf log N mq J 

where Mp is the material property at current temperature after the applica- 
tion of fatigue cycles; MpQ is the reference material property at reference 
temperature Tq (usually room temperature), reference stress ctq, and reference 
fatigue cycles %o! Tp, Sp, and N^p are the final temperature, final mate- 
rial strength, and final fatigue cycle, respectively; T is current nodal tem- 
perature; o is the respective current nodal stress; and 1% is the number of 
fatigue cycles to be considered in the fracture analysis. The exponents n, 
p, and q are determined from available experiment data or can be estimated 
from the anticipated material behavior due to the particular primitive random 
variable . 


APPLICATION TO SPECIFIC EXAMPLE 

The methodology described previously was applied to an SSME turbine blade 
(fig. 2) that was subjected to complex mechanical and thermal loads (ref. 6). 
Mechanical loads consisted of the centrifugal force induced by rotational speed 
and the differential pressure over the airfoil. Since it was difficult to 
maintain a constant rotational speed, the centrifugal force had to be consid- 
ered as a random variable, and differential pressure was also random because 


3 



of pressure fluctuation. In addition, thermal loads were random because of 
combustion irregularities that caused a random temperature distribution in the 


iu the blade geometry arose during the 


manuf ac t: 


Diaae. Uncertainties 
process. The scatter in material properties was caused by nonuni fortuities 
in the material. The SSME turbine blade was modeled by 40 four-node shell 
elements with 55 nodal points. For this example, seven random fields were 
considered as listed in table I. 


COMPUTATIONAL PROCEDURE 

The material properties considered in this analysis were the Young's modu- 
lus, the thermal expansion coefficient, and the material strength. Their prob- 
ability distributions were predicted by the probabilistic material property 
model (defined by eq. (l)) which is a function of its reference value, tempera- 
ture, and fatigue cycles. The statistics of the primitive random variables are 
listed in table II. Since the material is a function of stress and stress is 
a function of material property in an implicit way, an iterative procedure was 
necessary to obtain a convergent solution for stresses and material properties. 

The iteration procedure was started by predicting the probability dis- 
tributions of the material properties with equation (1). Only the reference 
values and the blade temperature were used at the beginning because the varia- 
tion of the blade stress was unknown. A probabilistic structural analysis was 
performed with NESSUS, and the probability distributions of stresses were 
determined. Since the stress field is a random process in space, the joint 
probability distributions of the stresses for the entire blade were needed. 

They were calculated by the first-order, second-moment reliability method. 
Figure 3 shows a surface in a standardized, normally distributed probability 
space for the stress at node i, o{, equal to a realization, y^ . One side of 
this surface represents the domain where aj < yi . The other side is the 
domain where o{ > The surface is defined by equation (2): 

£ “iA - »i - 0 < 2 > 


where L is the number of uncorrelated random variables, is the 

sensitivity factor from NESSUS/FPI , Ufc is the k*h normalized, independent 
random variable, and 3i is the reliability index. The joint cumulative 
distribution function for stresses at nodes i and j are calculated by 
equation (3): 

1 y i “ d °j 1 y i) • $ Oi>Oi) + 1„ 1 ’ *(- |3 i' -v z ) dz (3) 

where p. . is defined by 

L 

P i j ~ a ik a jk ^ 

The generic probabilistic material property model is applied again at a 
given fatigue cycle with these newly estimated stress variations. The proba- 
bility distributions of material properties are updated, and NESSUS is rerun. 



The procedure is repeated until the probability distributions of the material 
properties and stress converge. 


PROBABILISTIC FATIGUE CRACK INITIATION 

The SSME blade is assumed to be subjected to a given number of fatigue 
cycles that degrade the modulus, thermal expansion coefficient, and strength. 
Crack initiation occurs when the stress is greater than the strength. The 
critical points of the large displacement and high stress are depicted in 
figure 4. As shown in figure 5, the modulus at the root in the leading edge 
reduces significantly with fatigue degradation. 

Changes in the probability density function of the tip displacement with 
and without fatigue degradation are shown in figure 6. As expected, the tip 
displacements increase with fatigue effect because the stiffness degrades and 
the blade becomes softer. 

Material strength is calculated by the probabilistic material property 
model considering both temperature and fatigue degradation (fig. 7). Once the 
probability distributions of blade stress and strength are determined at this 
fatigue cycle, the probability that the stress is greater than the correspond- 
ing material strength is determined from equation (5): 


f c (x)dx (5) 

where f CT is the probability density function (pdf) of effective stress calcu- 
lated by the probabilistic structural analysis using NESSUS; fg is the pdf of 
material strength simulated by the probabilistic material property model. The 
number of cycles is varied, and the procedure described previously is repeated 
to develop a risk-fatigue cycle curve for critical locations (fig. 8). This 
curve is useful for assessing the risk of structural fracture. For instance, 
at a given acceptable risk level, the number of fatigue cycles to initiate 
local fracture can be determined. With this information available, criteria 
can be set for quality control, inspection intervals and retirement for cause. 


n+°° A nX 


P f = 


fg(s)ds 


RISK-COST ASSESSMENT 

The risk-cost assessment evaluates the relationship between structural 
reliability and total cost to achieve this reliability. The total cost is the 
sum of the initial cost associated with the structure and a fraction of conse- 
quential cost. The fraction is weighted by the probability of failure. The 
initial cost is the cost for component service readiness. The consequential 
cost is the cost incurred due to structural fracture. This relationship is 
represented by equation (6): 


Cf = Ci + Pf x Cf (6) 

where Cf represents the total cost, Cf represents the initial cost, Pf is 
the probability of failure, and Cf is the consequential cost if failure does 
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occur. A total cost-fatigue cycle curve is shown in figure 9. If it is 
desired to inspect a structure before the total cost exceeds an acceptable 
level, the proper time for inspection can be determined. 


PROBABILISTIC FRACTURE PATHS ANALYSIS 

Often it is important to know whether a structure can still operate safely 
or will fracture (cleavage or ductile) when a crack has just initiated. This 
can be probabilistically quantified by determining the most probable fracture 
initiation site, its respective probably path, and the corresponding structural 
integrity degradation during these processes. 

The probable fracture path is determined as follows: D° represents 

the structure in its undamaged state (no pre-existing cracks), and D^l^ 
represents a damaged state. in which fracture has occurred at nodes i, j, and 
k consecutively. Let B|i^ denote the event where node 1 fractures next 

when the structure is in the damaged state D^jk. Damaged state is defined as 
the terminal state (the structure collapses) when the probability of occurrence 
of event Bji^ is equal to 1.0 and the strain energy has a sudden jump. The 

probability of reaching the terminal state is the probability that events b 9, 
Bl, Bji, and Bjjk all occur. There are many probable fracture paths; only 

tAe two most probable paths are shown in figure 10: paths 1 and 2. The mean 

strain energy along path 2 is shown in figure 11. For path 2, the first frac- 
ture location is at node 10 with a probability of crack initiation equal to 
0.10. At damaged state D 49 , the probability to advance the crack to node 9 
is equal to 0.0002. When both nodes 10 and 9 are fractured, the probability 
that node 14 will fracture next is equal to 1.0. However, the change of mean 
strain energy is small from D 19 > 9 to d 19 ’ 9 ’ 14 . When the crack extends to 
the node 18, the mean strain energy has a sudden jump. It indicates that the 
global structural failure is imminent. Therefore, d^°> 9 > 14 is the terminal 
state. The probability of path 2 is determined by equation (7): 

P(path 2 occurs) = p(b° q D Bg 0 D bJ°’ 9 ) (7) 

where fl denotes the intersection of probability events. Similarly, the prob- 
ability of occurrence of path 1 is 

P(path 1 occurs) = P^B^ g fl B 4 ^ fl B 4 g’ 14 ) (8) 

The probability of path 2 occurring is 20 times greater than that of path 1 
occurring. Therefore, path 2 is the only significant fracture path in this 
study. It is not necessarily true for some other problems. The natural fre- 
quencies decrease along this fracture path as shown in figure 12. When the 
crack was just formed, only the first and third modes were affected. When the 
damaged state is at d 19 > 9 > 14 , significant frequency reduction is observed. 


PROBABILISTIC CRACK PROPAGATION 

Structural components that either contain cracks or develop cracks early 
in their lives may still carry the service loads safely. Practical limitations 
in manufacture, inspection, and use of many structural components also prohibit 


6 



complete elimination of flaws. In some cases, where initial flaws prevail, 
slowly propagating cracks occupy a significant portion of the usable component 
life time. Therefore, the determination of fatigue crack propagation is an 
essential part of setting guidelines for inspection intervals and retirement 
for cause. Inspections should be made to detect and repair the defects prior 
to the conditions for imminent global fracture. The fundamental failure mech- 
anism by which a crack propagates is that the load effect is greater than the 
material resistance at the current structural conditions. At a given number of 
cycles, the material resistance is exceeded by the cyclic load effect, and a 
new fracture mechanism is formed. The crack is either initiated or advanced, 
and a reliability assessment of fatigue life is needed to provide a basis to 
ensure a safe operation. 


The probabilistic structural life can be divided into two parts: crack 

initiation life and crack propagation life at a given risk level. The risk 
level is based on the cost to upgrade the material and on the cost for the con- 
sequences of structural failure. During the crack initiation life (fig. 13), 
the probability of crack initiation at node 10 is lower than the probability for 
acceptable risk until the number of cycles reaches 10 4 - 6 . A crack is assumed to 
occur at this time. A probabilistic structural analysis is performed for this 
damaged structure at this fatigue cycle. The location (node 9) with highest 
probability of failure is detected and the structure undergoes crack propaga- 
tion. As shown in figure 14, the probability of forming a new failure mechan- 
ism is smaller than that for the acceptable risk at the beginning of the crack 
propagation life. The structure is considered to be safe and can resist addi- 
tional cycles. Again, when the number of cycles increase, the material proper- 
ties such as modulus, strength, and fracture toughness degrade according to 
equation (1). At 10 5 - 6 cycles, the acceptable risk level is reached, and the 
crack advances from node 10 to node 9. The crack propagation rate is deter- 
mined as 


da 

dN ” 


a(9 ,10) 


10 


5.6 


10 


4.6 


1.6x10 


in. /cycle 


( 9 ) 


where N is the number of cycles and a (9, 10) is the distance between nodes 9 
and 10. The procedure is repeated with increasing cycles until risk rapidly 
violates the acceptable bound (fig. 15). Prior to this (say, at 10 5 cycles), 
the structure must be retired for cause (global structure fracture). Inspec- 
tion intervals can be set during the crack propagation process to assure 
safety. For example, if the acceptable probability of failure is set at 10~3 , 
the structure should be inspected right after 10 5 cycles (fig. 14). 


SUMMARY OF RESULTS 

A methodology for evaluating reliability and risk for aerospace components 
has been developed. It consists of a probabilistic structural analysis by 
NESSUS, a generic probabilistic material property model, and a probabilistic 
fatigue analysis. The methodology is versatile and equally applicable to hot 
and cold structures where data is difficult to obtain. The relationship 
between risk associated with local crack initiation (or total cost) and fatigue 
cycle were developed. The most probable fracture path at given cycles was 
found. The probabilistic fatigue life at a given risk level was studied. This 
information provides guidelines for setting inspection intervals, retiring com- 
ponents for cause, and certifying components. 
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APPENDIX - SYMBOLS 


alg.ml 

Bj ik 

Cf 

Ci 

C t 

D 1 jk 
D° 

fa 

L 

Mp 

Mpo 

N 

% 

n MF 

n MO 

p 

Pf 

s 

S F 

T 

t f 

TO 

Uk 


distance between nodes 9 and 10 

event where node . , I fractures next when the structure is in the 

damaged state Dijk 

consequential cost if failure does occur 
initial cost 
total cost 

structure damaged at nodes i,j,k 
structure in undamaged state 

probability density function of material strength simulated by the 
material property model 

probability density function of effective stress calculated by the 
probabilistic structural analysis using NESSUS 

number of uncorrelated random variables 

material property at current temperature after the application of 
fatigue cycles 

reference material property at reference temperature Tq 
number of mechanical cycles 

number of fatigue cycles considered in the fracture analysis 

final fatigue cycle 

reference fatigue cycles 

probability 

probability of failure 

material strength 

final material strength 

current temperature 

final temperature 

reference temperature (usually room temperature) 
normalized independent random variable 
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Yi 


realization 


cqk sensitivity factor from NESSUS/FPI 

(3| reliability index (fig. 3) 

Pij correlation coeff icient 

a respective current point stress 

oq reference stress 

$ normal cumulative distribution function 

(j> normal probability density function 

Subscripts : 

E modulus 

F final 

f failure 

i , j ,k nodes i , j , and k 

S material strength 

t total 

v Poisson's ratio 

c effective stress 

0 reference condition 
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TABLE I . - RANDOM INPUT DATA 


Random fields 

Number of 
dependent 
random 
variables 

Mean 

Standard 
deviation 
(or coefficient 
of variation) 

Correlation 

length 

X coordinate 

55 

Deterministic 

coordinate 

0.01 in. 

5.0 

Y coordinate 



Deterministic 

coordinate 

0.01 in. 

5.0 

Z coordinate 



Deterministic 

coordinate 

0.01 in. 

5.0 

Temperature 



Steady-state 

temperature 

60 °F 

3.0 

Young's modulus 

40 

23 000 000 psi 

(0.10) 

3.0 

Pressure 

36 

Steady-state 

pressure 

(0.20) 

0 

Rotation speed 



40 000 rpm 

(0.01) 

(a) 

Poisson's ratio 

40 

0 . 45xl0 -5 

0 . 45x10"® 

3.0 


a Not applicable. 
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PROBABILITY DENSITY PROBABILITY DENSITY 


TABLE II. - PRIMITIVE VARIABLE PROBABILITY 
DISTRIBUTIONS FOR PROBABILISTIC MATERIAL 
PROPERTY MODEL 


Variable 3 

Distribution 

type 

Mean 

Standard 

deviation 

Tp, °F 
T 0 , °F 
Sp, ksi 
°0 
n MF 

nmo 

n E 

PE 

<IE 

n v 

Pv 

Qv 

"s 

Ps 

Qs 

Normal 

Normal 

Normal 

Constant 

Lognormal 

Lognormal 

Normal 

2750 

68 

212.0 

0 

10 8 

10 3 

0.25 

0.25 

0.25 

-0.25 

0.25 

51.4 

2.04 
10.6 

0 

5x10 

50 

0.0075 


a The variables n, p, and q are the exponents 
in equation (1); E is the Young's modulus; v 
is the Poisson's ratio; S is the strength; 

Sp is the final material strength; and T, 
o , and N^ are the temperature, stress, and 
number of fatigue cycles at reference 0 or 
final F conditions. 



(LOAD, MATERIAL, GEOMETRY, 



BOUNDARY CONDITIONS) 


STRUCTURAL MODEL 



(DISPLACEMENT, STRAIN, STRESS) 


FIGURE 1. - CONCEPT OF PROBABILISTIC STRUCTURAL 
ANALYSIS. 


STOCHASTIC 




FIGURE 3. - LINEARIZED SURFACE FOR STRESS y, 
WHERE 0j IS THE STRESS AT NODE i, y| IS THE 
REAL VALUE, AND |3j IS THE RELIABILITY INDEX. 



STRESSES-*-^ 

FIGURE A. - SPACE SHUTTLE MAIN ENGINE (SSME) BLADE SHOWING 
LOCATIONS WHERE PROBABILISTIC STRUCTURAL RESPONSE WAS 
EVALUATED. 
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PROBABILISTIC DISTRIBUTION PROBABILISTIC DISTRIBUTION 




(b) NODE B. MEAN STRESS STRENGTH RATIO, 0.82. 

FIGURE 5. - PROBABILISTIC MODULUS SIMULATED BY USING 
THE GENERIC PROBABILISTIC MATERIAL PROPERTY MODEL. 
(NODES A AND B SHOWN IN FIG. A.) 




FIGURE 6. - PROBABILISTIC DISPLACEMENTS CALCULATED 
BY NESSUS. (NODES C AND D SHOWN IN FIG. A.) 




FIGURE 7. - PROBABILISTIC FATIGUE STRESS OR 
STRENGTH SIMULATED BY USING THE GENERIC 
PROBABILISTIC MATERIAL PROPERTY MODEL. 
(NODES A AND B SHOWN IN FIG. A.) 



FIGURE 8. - PROBABILITY OF LOCAL FAILURE AT NODE A 
(FIG. A) DUE TO FATIGUE CYCLES. 
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PROBABILITY OF OCCURENCE 



FATIGUE CYCLES 


FATIGUE CYCLES 


FIGURE 13. - PROBABILITY OF CRACK INITIATION AT FIGURE IN. - PROBABILITY OF CRACK EXTENDED TO NODE 9 

NODE 10 AT DAMAGED STATE D° (OR P^)). AT DAMAGED STATE D 10 (OR P(B™)). 



10* 1 10 5 10 6 


FATIGUE CYCLES 

FIGURE 15. - PROBABILITY OF CRACK EXTENDED TO NODE 
IN AT DAMAGED STATE D 10 ' 9 (OR P(B 10 ' 9 ). 
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